Extracted

• • Target

    8603e823373d74c3f7084f6c03696c0a8ce2aa601b17b2d7b1a0120d0d1c0dab

  • Size

    660KB

  • MD5

    b4f177dd86ea2d3fdbe42586d1755e44

  • SHA1

    c922576118fa33f14b67a110ea051a5a6afe7c02

  • SHA256

    8603e823373d74c3f7084f6c03696c0a8ce2aa601b17b2d7b1a0120d0d1c0dab

  • SHA512

    cb216fd8ddeaee5d802f95c159c4eb9d301836e73b6c81d02f6f1adc3c123941e8fcc93553240609f6325edba65161f2f6766b66094728c204db2f4d63ec2529

  • SSDEEP

    12288:zMrwy90VVdmOSVfdONPZMwDZc76FOthgGtv2:/yUQSYwlc4OthgYe

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1